Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/0YwA6u5T8G_y8KzHQVJZSuQxNRQ.roa (download)

Subject key identifier:   D1:8C:00:EA:EE:53:F0:6F:F2:F0:AC:C7:41:52:59:4A:E4:31:35:14 
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
asID:                     AS399114
Prefixes:
    1: 185.162.75.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/0YwA6u5T8G_y8KzHQVJZSuQxNRQ.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58691706 (0x37f907a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
        Validity
            Not Before: Jan  1 00:08:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d18c00eaee53f06ff2f0acc74152594ae4313514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:cd:6b:4c:39:ce:37:99:f0:f5:30:b2:05:
                    4a:3c:f2:60:9b:ec:8c:0e:3c:07:11:eb:10:bd:70:
                    bc:a4:33:b5:46:eb:e0:0c:81:32:45:21:58:22:a9:
                    0a:d4:8e:09:02:70:53:f3:75:01:34:23:df:e6:f5:
                    ad:ef:64:b9:c8:6a:00:f7:05:be:d8:42:01:ba:c7:
                    0c:b8:28:b7:88:a4:d0:11:f4:6a:0f:94:de:47:d1:
                    24:4a:e3:39:a6:9b:6a:a7:db:fa:2c:55:0a:c8:24:
                    b2:5c:81:4a:74:20:30:b6:56:8f:5f:fc:ab:0b:84:
                    5f:72:76:24:8c:84:46:e6:a6:c6:30:2a:6a:99:fc:
                    71:94:28:3b:08:7c:31:7c:a1:27:4e:3f:e3:03:0c:
                    bd:15:1a:95:70:60:d6:12:3e:a3:6d:9a:c3:48:4a:
                    6a:21:2c:f8:d5:6f:09:96:ec:97:9b:a8:1b:c6:72:
                    d1:15:2c:cc:32:29:ee:6a:07:80:36:89:f7:4d:52:
                    f9:73:36:32:27:1b:76:a2:c5:95:b6:11:c7:68:b7:
                    c2:89:ae:3b:f2:02:58:11:0d:9f:d1:05:19:4b:d4:
                    ab:e1:4f:e4:87:5e:cb:ac:98:f1:d9:a3:64:cd:d3:
                    9f:44:9a:88:11:9b:c3:c4:25:1d:00:f5:28:d3:9f:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D1:8C:00:EA:EE:53:F0:6F:F2:F0:AC:C7:41:52:59:4A:E4:31:35:14
            X509v3 Authority Key Identifier: 
                keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/0YwA6u5T8G_y8KzHQVJZSuQxNRQ.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:06:ea:cd:ab:46:f9:f2:ef:d5:57:84:0e:a7:e4:fc:8a:
         c2:cd:ee:24:40:d1:9a:00:3e:6c:52:c1:9e:1a:21:21:8e:75:
         13:ab:e0:cf:14:74:fb:67:ec:e2:a5:25:10:07:57:dd:5a:3a:
         1b:f8:a8:48:76:9a:09:22:7e:f2:0c:e9:cc:ce:ff:80:15:24:
         e7:7d:af:91:a1:91:b3:6f:25:a8:62:af:a7:52:2b:82:72:ce:
         55:68:85:81:e9:72:d5:9b:41:51:97:bd:c3:b1:5e:bd:ad:ba:
         33:6d:48:c0:1b:dd:3b:1b:55:0c:f8:00:23:41:6f:80:be:31:
         58:a5:6b:19:3f:68:0c:56:97:36:8a:af:46:9d:1c:33:98:60:
         b7:d7:31:f6:d9:42:89:58:af:7f:ca:e9:72:8b:aa:39:5f:27:
         d9:54:81:5d:76:04:42:50:ef:26:4a:10:63:1b:69:84:1a:47:
         e9:a1:97:db:ce:b1:c9:ae:e5:89:e7:db:86:7b:60:74:f0:cf:
         73:10:03:e8:bd:49:df:8f:0d:62:3c:41:3f:ae:d1:07:ee:f6:
         c7:ef:e7:59:f2:2e:fc:38:f7:5f:9a:c7:34:73:f3:37:15:86:
         b2:92:64:d3:55:ef:e4:ab:ce:4d:24:65:53:bf:75:b3:c2:74:
         a6:a9:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:09:21 2021 by LibreSSL & rpki-client.